150832 - Download manager causes coredump when try to save to japanese filename [@ nsAssignmentSet::GetAssignmentFor]

Status: VERIFIED DUPLICATE of bug 132905

(SeaMonkey :: Download & File Handling, defect)

Description

[Masaki Katakai]

In local build here, when I tried to save HTML contents to
locale file as multibyte filename, Mozilla always dumpcs core.

Build: local build with fix of bug 147333
Platform: Soalris 8
Locale: ja
Filename: any filename of multibytes
Steps:

  1. Login to desktop in ja (EUC) locale
  2. Start Mozilla
  3. www.mozilla.org
  4. File -> Save Page As
  5. Enter Japanese into File name: field
  6. Click Save
     => dumpcs core.

It this dup of bug 132905??
When I disable download manager by the following,
this problem does not happen.

pref("browser.downloadmanager.behavior", 1);

Stack:

   [1] nsAssignmentSet::GetAssignmentFor(0x10, 0x5, 0xffbe95ec, 0xfeab36d8,
0x91ddb2, 0x0), at 0xfc710f50
   [2] nsTemplateMatch::GetAssignmentFor(0x0, 0x8da760, 0x5, 0xffbe95ec,
0xfc72f8d0, 0xffbe990e), at 0xfc71297c
   [3] nsXULTemplateBuilder::SubstituteTextReplaceVariable(0x8da6c0, 0xffbe9734,
0xffbe9844, 0x0, 0xffbe9720, 0xff186518), at 0xfc72f96c
   [4] nsXULTemplateBuilder::ParseAttribute(0xff1d3cd8, 0xffbe9c24, 0xfc72f820,
0xfc72f7f8, 0xffbe9844, 0x0), at 0xfc72f3cc
   [5] nsXULTemplateBuilder::SubstituteText(0x8da6c0, 0x0, 0xffbe9c24,
0xffbe9a7c, 0x0, 0x0), at 0xfc72f764
   [6] nsXULContentBuilder::BuildContentFromTemplate(0x0, 0x7bda20, 0x88ebb0,
0x0, 0x0, 0x88ebb0), at 0xfc7158d4
   [7] nsXULContentBuilder::CreateTemplateContents(0x0, 0x80000000, 0x8da448,
0x0, 0x0, 0x7bda60), at 0xfc717560
   [8] nsXULContentBuilder::CreateTemplateAndContainerContents(0x8da6c0,
0x7bda20, 0x0, 0x0, 0x7bda20, 0x7bd9e0), at 0xfc716f2c
   [9] nsXULElement::EnsureContentsGenerated(0x7bda20, 0x1, 0xfc97aea0,
0x2894f0, 0xfc6c3b60, 0x922340), at 0xfc6d0104
   [10] nsXULElement::ChildCount(0x7bda20, 0xffbea610, 0x15b6f8, 0x7, 0x46440,
0xff185308), at 0xfc6cbb3c
   [11] nsXULElement::GetChildNodes(0x7bda20, 0xffbea7c4, 0xffbea834, 0x4632c,
0xff185528, 0x0), at 0xfc6c846c
   [12] nsXULElement::GetElementsByTagName(0x7bda24, 0x96ae60, 0x9222c8,
0xfc7b9ef0, 0xfc6d03d8, 0x7), at 0xfc6d025c
   [13] nsXULElement::GetElementsByTagName(0x80000000, 0xff1d4be8, 0xff1d3920,
0x66454, 0xfc92b34b, 0x0), at 0xfc6d0510
   [14] nsXULElement::GetElementsByTagName(0x80000000, 0xff1d4be8, 0xff1d3920,
0x66454, 0xfc92b34b, 0x9222c8), at 0xfc6d0510
   [15] nsXULElement::GetElementsByTagName(0x80000000, 0xff1d4be8, 0xff1d3920,
0x66454, 0xfc92b34b, 0x2), at 0xfc6d0510
   [16] nsXULElement::GetElementsByTagName(0x8dd728, 0x96ae60, 0xffbeaf70,
0x60009200, 0x1, 0xd78f8), at 0xfc6c9d50
   [17] XPTC_InvokeByIndex(0x8dd72c, 0x23, 0x2, 0xffbeaf60, 0xffbeae9c,
0xffbeb054), at 0xff168a24
   [18] XPCWrappedNative::CallMethod(0x0, 0x8e0bf4, 0xffbeaf70, 0x12, 0x0, 0x0),
at 0xfe5d229c
   [19] XPC_WN_CallMethod(0x786de0, 0x8c49a0, 0x1, 0x8e0bf4, 0xffbeb168,
0xfe601b4c), at 0xfe5da844
   [20] js_Invoke(0x8c4620, 0x0, 0xfe5da73c, 0x8e0c00, 0x80000000, 0x0), at
0xff23ca40
   [21] js_Interpret(0x0, 0xff292844, 0x80000000, 0x3, 0x800, 0x0), at 0xff245554
   [22] js_Invoke(0x8c4f78, 0x5d0468, 0x0, 0x8e0b58, 0x80000000, 0x0), at 0xff23ca9c
   [23] js_InternalInvoke(0x8e0b38, 0x8c4f78, 0x8c4f90, 0x0, 0x1, 0xffbeb9ac),
at 0xff23ccc8
   [24] JS_CallFunctionValue(0x786de0, 0x8c4f78, 0x8c4f90, 0x1, 0xffbeb9ac,
0xffbeb5d4), at 0xff2163a8
   [25] nsJSContext::CallEventHandler(0x0, 0xffbeb5fc, 0x0, 0xffbeb604,
0x80000000, 0xffbeb668), at 0xfcdb05a0
   [26] nsJSEventListener::HandleEvent(0x786de0, 0xff1d4be8, 0x80000000, 0x10,
0x1, 0xffbebb9c), at 0xfcdf1f1c
   [27] nsXBLPrototypeHandler::ExecuteHandler(0xff1d4be8, 0x8c3d78, 0x786de0,
0x66538, 0xffbec0e4, 0x945e10), at 0xfc74f2c8
   [28] nsXBLPrototypeHandler::BindingAttached(0x66b270, 0x8515f8, 0x8515f8,
0xfc74f67c, 0x0, 0x0), at 0xfc74f7cc
   [29] nsXBLBinding::ExecuteAttachedHandler(0x8516a0, 0xffbec2b0, 0xfc97f664,
0xfc76178c, 0x0, 0x963ad8), at 0xfc737e00
   [30] nsBindingManager::ProcessAttachedQueue(0x63dfc8, 0xffbec368, 0x80000000,
0xffbec468, 0x8515f0, 0x95d324), at 0xfc7617bc
   [31] nsCSSFrameConstructor::ContentInserted(0x0, 0x0, 0x1, 0x0, 0xffbec5bc,
0x8000), at 0xfc1b11d0
   [32] nsCSSFrameConstructor::ContentAppended(0x0, 0xffbec854, 0x8515f4,
0xfc377688, 0x2, 0x91d458), at 0xfc1aff64
   [33] PresShell::ContentAppended(0x91c7b8, 0x871698, 0x8dd728, 0x2,
0xffbec998, 0xffbec990), at 0xfc14a000
   [34] nsXULDocument::ContentAppended(0x871698, 0x8dd728, 0x2, 0xffbec990,
0x10, 0x0), at 0xfc6ed590
   [35] nsXULContentBuilder::Rebuild(0x8da6c0, 0x8dd728, 0xffbeccac, 0x8da6c0,
0x0, 0x8da6c0), at 0xfc718afc
   [36] XPTC_InvokeByIndex(0x8da6c0, 0x5, 0x0, 0xffbecbb8, 0x8c4f60, 0x8da6c0),
at 0xff168a24
   [37] XPCWrappedNative::CallMethod(0x0, 0x8e0b38, 0x7bb470, 0x0, 0xffbeccac,
0x0), at 0xfe5d229c
   [38] XPC_WN_CallMethod(0x786de0, 0x8c4f60, 0x0, 0x8e0b38, 0xffbecdc0,
0xfe601b04), at 0xfe5da844
   [39] js_Invoke(0x8c4f60, 0x0, 0xfe5da73c, 0x8e0b44, 0x80000000, 0x0), at
0xff23ca40
   [40] js_Interpret(0x0, 0xff292844, 0x80000000, 0x3, 0x800, 0x0), at 0xff245554
   [41] js_Invoke(0x8c3d78, 0x663d38, 0x0, 0x8e0a84, 0x80000000, 0x0), at 0xff23ca9c
   [42] js_InternalInvoke(0x0, 0x8c3d78, 0x8c3f28, 0x0, 0x1, 0xffbed604), at
0xff23ccc8
   [43] JS_CallFunctionValue(0x786de0, 0x8c3d78, 0x8c3f28, 0x1, 0xffbed604,
0xffbed22c), at 0xff2163a8
   [44] nsJSContext::CallEventHandler(0x0, 0xffbed254, 0x0, 0xffbed25c,
0x80000000, 0xffbed2c0), at 0xfcdb05a0
   [45] nsJSEventListener::HandleEvent(0x786de0, 0xff1d4be8, 0x80000000, 0x6,
0x1, 0x0), at 0xfcdf1f1c
   [46] nsEventListenerManager::HandleEventSubType(0xff1d4be8, 0x0, 0xffbed6dc,
0x87cfc8, 0x1, 0x7), at 0xfc5422b8
   [47] nsEventListenerManager::HandleEvent(0x0, 0x1, 0x918330, 0xffbeda64, 0x0,
0x1), at 0xfc544448
   [48] GlobalWindowImpl::HandleDOMEvent(0x87cfb8, 0x0, 0x0, 0xfce2d8cc, 0x1,
0xffbedc0c), at 0xfcdb7244
   [49] DocumentViewerImpl::LoadComplete(0x65f5c8, 0x0, 0xffbee6e4, 0xff072090,
0xfbf1347c, 0x0), at 0xfc788918
   [50] nsDocShell::EndPageLoad(0x870b68, 0x84b67c, 0x8e9a78, 0x0, 0x0, 0x0), at
0xfcefd764
   [51] nsWebShell::EndPageLoad(0x870b68, 0x84b67c, 0x8e9a78, 0x0, 0xffbeeaec,
0x0), at 0xfcf0c2bc
   [52] nsDocShell::OnStateChange(0xffbee7e8, 0x20000, 0xff1d4be8, 0x0, 0x0,
0x0), at 0xfcefd3cc
   [53] nsDocLoaderImpl::FireOnStateChange(0x0, 0xff1d4d30, 0x2, 0xffbee8a4,
0x0, 0x0), at 0xfcea1e38
   [54] nsDocLoaderImpl::doStopDocumentLoad(0x84b668, 0x8e9a78, 0x0, 0xffbee968,
0x0, 0x0), at 0xfcea11c0
   [55] nsDocLoaderImpl::DocLoaderIsEmpty(0x84b668, 0xffbee9dc, 0x1, 0xffbee974,
0x0, 0x957e08), at 0xfcea107c
   [56] nsDocLoaderImpl::OnStopRequest(0x84b668, 0x957e08, 0x91b340, 0x0,
0xfbf12f20, 0x0), at 0xfcea0ea8
   [57] nsLoadGroup::RemoveRequest(0x84b700, 0x957e08, 0x91b340, 0x0,
0xfbf1347c, 0x0), at 0xfdae44c0
   [58] imgRequestProxy::OnStopRequest(0x957e08, 0x9565c0, 0x0, 0x0, 0x0, 0x0),
at 0xfcbc18a4
   [59] imgRequest::OnStopRequest(0x956658, 0x9565c0, 0x0, 0x0, 0xffbeeaec,
0x0), at 0xfcbbfe44
   [60] nsJARChannel::OnStopRequest(0x9565c0, 0x956814, 0x0, 0x0, 0x0, 0x3f), at
0xfdb6493c
   [61] nsOnStopRequestEvent::HandleEvent(0x956c28, 0x956c28, 0xfdaec114,
0xfeab36d8, 0xff145f10, 0x0), at 0xfdaec1a0
   [62] PL_HandleEvent(0x956c2c, 0x1, 0xfdb054f8, 0x0, 0x0, 0x0), at 0xff145ea8
   [63] PL_ProcessPendingEvents(0x103870, 0xfe94080c, 0x1, 0x0, 0x0, 0x0), at
0xff145db8
   [64] nsEventQueueImpl::ProcessPendingEvents(0x123cc0, 0x123cc0, 0xff1471f8,
0xfe93a004, 0x0, 0x0), at 0xff14722c
   [65] our_gdk_io_invoke(0x2ce6f8, 0x1, 0x2816c0, 0xfebcbf6c, 0x0, 0x0), at
0xfe47e9c4
=>[66] g_io_unix_dispatch(source_data = 0x32b400, current_time = 0xffbeef10,
user_data = 0x2816c0), line 137 in "giounix.c"
   [67] g_main_dispatch(current_time = 0xffbeef10), line 654 in "gmain.c"
   [68] g_main_iterate(block = 1, dispatch = 1), line 870 in "gmain.c"
   [69] g_main_run(loop = 0x2816d0), line 928 in "gmain.c"
   [70] gtk_main(), line 475 in "gtkmain.c"
   [71] nsAppShell::Run(0x18c338, 0x18c338, 0xfe47f28c, 0x1a264, 0x19ac0, 0x0),
at 0xfe47f2cc
   [72] main1(0x80000000, 0x21ef5, 0xff1d4da8, 0xff1d4be8, 0x0, 0xffbef1c0), at
0x1a2a8
   [73] main(0x1, 0xffbef2ec, 0xffbef2f4, 0x66000, 0x0, 0x0), at 0x1ae18

Comment 1

[Adam Hauner]

BTW bug 148934 is about crashing with czech chars in filename. Maybe both are
related.

BTW2 bug 132905 has same stack signature.

Comment 2

[Blake Ross]

*** This bug has been marked as a duplicate of 132905 ***

Comment 3

[sairuh (rarely reading bugmail)]

marking verified as a duplicate.

if you decide to reopen this bug, please clarify why.

search string for bugspam removal: SalviaGuaranitica